Privacy Policy

DENIVIE.COM

Table of Contents

§ 1 General Information
§ 2 Personal Data Controller
§ 3 Collection and Purpose of Personal Data Processing
§ 4 Categories of Personal Data
§ 5 Recipients of Personal Data
§ 6 Archiving of Personal Data
§ 7 Rights, Access and Updating of Personal Data, Complaints
§ 8 Automated Data Processing, Cookie Policy
§ 9 Amendments to the Privacy Policy

Version 2.0 of the Privacy Policy applies from 1 January 2023.

§ 1 GENERAL INFORMATION

This Privacy Policy of the Online Store does not constitute a source of obligations for the Visitor (including Guests) and Customers of the Online Store. It is for information purposes only; it is neither a contract nor a set of terms and conditions.

All expressions and words capitalised (e.g. Online Store, Customer, etc.) shall be understood in accordance with the Terms and Conditions of the Online Store.

In the event of any discrepancies between this Privacy Policy and the consents to the processing of personal data given by an individual, the legal basis for determining the scope of the Controller’s actions shall be the voluntarily given consents or the provisions of law applicable to the specific factual situation.

§ 2 PERSONAL DATA CONTROLLER

The Controller of your personal data is NPTK Sp. z o.o., with its registered office in Warsaw (00-682), ul. Hoża 86/410, entered into the National Court Register (KRS) by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register under KRS no. 0001192424, NIP 7011276382, REGON 542653136 (hereinafter: the “Controller”).

For any matters related to personal data protection, please contact us at the above address or by e-mail at: contact@denivie.com
.

You may also send a request to the above address for information on what personal data concerning you we hold and for what purposes we process it.

The Controller informs that it stores correspondence for statistical purposes and to improve the GDPR support system, as well as in the scope of complaint handling and administrative decisions taken on the basis of submitted requests. The addresses and data collected in this way will not be used for communication purposes other than the performance of the request, in particular they will not be used for marketing purposes nor shared with third parties.

If you contact the Controller to carry out specific actions (e.g. submit a complaint, return goods), the Controller may again request you to provide data, including personal data (e.g. name, surname, address, e-mail address) to confirm your identity and enable a reply in the matter. Providing these data is voluntary but may be necessary to perform the action or to obtain the information you are interested in.

If you have given additional consent to our use of cookies, the controllers of data obtained on the basis of your online activity may also be our trusted partners.

§ 3 COLLECTION AND PURPOSE OF PERSONAL DATA PROCESSING

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), and other applicable data protection laws.

We ensure that the data obtained from you is confidential, secure and processed only when necessary. We process data lawfully, fairly and transparently. We collect only the data necessary for the legitimate purpose of processing. Data is collected with due care and appropriately protected against unauthorised access. We apply appropriate security measures and up-to-date technical knowledge to protect data from accidental loss, unauthorised access, use, alteration or disclosure. Data is stored in an identifiable form for no longer than necessary for the purposes of processing.

The Controller collects personal data in the following ways, among others:

when a Customer makes a purchase in the Online Store;

through Customer Account registration;

through voluntary subscription to the newsletter;

by submitting a product enquiry in the Online Store;

through voluntarily entered information in an e-mail message;

by submitting a complaint, request, enquiry or other correspondence;

by sending information via e-mail in connection with an intent to cooperate or through the contact form;

via messages sent in the Chat communicator;

through cookies, pixels or similar internet technologies.

The purpose and scope of data processed by the Controller result from the consent of the Website Visitor or Customer or from legal provisions, and in selected cases are specified by the actions taken by these persons in the Online Store or through other communication channels.

Providing personal data is voluntary but necessary to use certain functionalities of the Online Store (e.g. to place and settle an Order, register a Customer Account or use contact forms). The required data is indicated each time in the Online Store or in other communication channels or in the Terms and Conditions.

Your personal data is collected by the Controller for the following purposes, among others:
– to perform and settle Orders,
– to operate the Customer Account,
– to send newsletters,
– to respond to product enquiries and handle complaints,
– and, with your separate consent, for marketing, profiling and customised offers.

Newsletter: In order to sign up for our newsletter, you must provide your e-mail address via the newsletter sign-up form. Providing data is voluntary but necessary to receive the newsletter. Your data is processed for the duration of the newsletter service unless you unsubscribe earlier.

E-mail contact: By contacting us by e-mail you provide your e-mail address as the sender’s address and may also include other personal data in the message. Your data is processed to contact you, and after contact ends, archived for up to 5 years for internal accountability purposes.

Product enquiry: To ask a question about a product you must fill in a form with your name and e-mail address. Data is processed for the duration of the question on the website unless you request deletion earlier.

Customer Account: When creating an Account you provide your e-mail address voluntarily but necessarily. Data is processed for the duration of the Account unless you request deletion earlier.

You may also register your account via Facebook or Google. In such a case the relevant provider automatically transfers your e-mail address to us so that we can create your Account. For information on how Facebook or Google process your data, please refer to their privacy policies.

§ 4 CATEGORIES OF PERSONAL DATA

The Controller may process, among others:

data provided in the Order form: e-mail, phone number, name, surname, address;

data provided during Customer Account registration: e-mail;

data completed when using the Customer Account: name, surname, e-mail, phone number, address, and for non-consumer Customers, company name and VAT number;

data for newsletter subscription or contact form, complaints, claims: name, surname, e-mail, phone number, address, bank account number, VAT number;

data for participation in competitions/promotional actions: name, surname, e-mail, phone number, address;

other data obtained on the basis of Customer’s online activity, including cookies and similar technologies.

§ 5 RECIPIENTS OF PERSONAL DATA

Your personal data may be processed by our partners and subcontractors – entities we use for data processing and providing services to you. All such entities guarantee the use of appropriate safeguards required by law.

We may share personal data with:

state authorities or other entities entitled under the law, to fulfil our legal obligations;

partners who technically help run the Online Store (e.g. send e-mails, run marketing campaigns), hosting or IT service providers, carriers or intermediaries delivering Orders, electronic payment or card payment processors, software service companies, marketing support, legal and advisory service providers, external accounting;

anonymised data (non-identifiable) with our partners.

Our suppliers are mainly based in Poland or other EEA countries, and in some cases (e.g. Google Analytics) outside the EEA. We have IP anonymisation enabled and do not transfer IP addresses to the USA. Remaining data sent to Google does not qualify as personal data.

§ 6 ARCHIVING OF PERSONAL DATA

We store your personal data only as long as necessary for the purposes described in this Privacy Policy and/or to meet legal and regulatory requirements, after which we securely delete it.

Examples of retention periods:

Data related to sales procedures: 5 years

Marketing data: until consent is withdrawn or an objection is raised

Contact form/e-mail data: 3 years for accountability purposes

Reviews data: until consent is withdrawn or an objection is raised

Cookies and similar functions: until deleted via browser/device settings or an objection is raised

Data related to complaint or claim procedures: 5 years

Other data: 2 years (except cookies as per Cookie Policy)

Data will also be stored when legal regulations (e.g. accounting or tax) require us to process it, or for the limitation period of claims.

§ 7 RIGHTS, ACCESS AND UPDATING OF PERSONAL DATA, COMPLAINTS

Under Article 15 GDPR you have the right to obtain from the Controller confirmation as to whether your personal data is being processed.

If we process your personal data, you have the right to:

access your personal data;

obtain information about purposes of processing, categories of data, recipients, planned retention period, rights under GDPR, source of data, automated decision-making including profiling and safeguards for transfers outside the EU;

receive a copy of your personal data.

You also have the right to rectify (Art. 16), erase (Art. 17), object to processing (Art. 21) and, where technically feasible, request data portability to another organisation (Art. 20). You may request restriction of processing (Art. 18).

We will update or delete your data unless we have a legal obligation to retain it. We aim to respond to your requests promptly and no later than 30 days from receipt; in complex cases we may extend this period and inform you.

If you are dissatisfied with our response, you have the right to lodge a complaint with the supervisory authority for data protection. In Poland this is the President of the Personal Data Protection Office (Prezes UODO).

§ 8 AUTOMATED PERSONAL DATA PROCESSING, COOKIE POLICY

Our Website, like almost all websites, uses cookies. The Cookie Policy applies to both Customers and Visitors who browse the Online Store without purchasing. The Cookie Policy forms an integral part of this Privacy Policy. The full text of the Cookie Policy is available [here].

Our Website also uses functionalities similar to cookies. Therefore, the provisions of the Cookie Policy also apply accordingly to these technologies.

§ 9 AMENDMENTS TO THE PRIVACY POLICY

These Privacy Policy rules 1.0 apply from 5 May 2024.

The Controller reserves the right to amend this document for important reasons, including:

changes in applicable law, especially GDPR, telecommunications law, electronic services and consumer rights affecting the Controller’s or data subjects’ rights and obligations;

development of functionalities or electronic services resulting from the progress of internet technology, including implementation of new IT solutions affecting the scope of this Privacy Policy.

We undertake to inform Users of any changes in advance, for example by posting a consolidated version of the Privacy Policy on the homepage of the Website.

For Users of the newsletter, if we make significant changes to the Privacy Policy, we will inform you by e-mail. If you object to the changes, you may unsubscribe from the newsletter or request deletion of your personal data.